IT Governance Lead: Audit, Risk & Compliance

TNG Digital Sdn Bhd; Kuala Lumpur; On-site; MYR 90,000 - 170,000; Full time

Job summary

TNG Digital Sdn Bhd in Kuala Lumpur seeks a Team Lead for IT Governance to own and coordinate internal, external, and regulatory audits across the Tech Division, including PCI-DSS validation. You will track audit observations and ensure comprehensive documentation, maintaining readiness throughout the year.

The role requires 7+ years in IT governance, strong knowledge of BNM RMiT, PCI-DSS, and ISO/IEC 27001, and experience guiding DevSecOps and secure SDLC practices.

Qualifications

• Bachelor’s degree in IT, cybersecurity or related field.
• 7+ years in IT governance, audit and compliance in regulated environments.
• Deep knowledge of BNM RMiT, PCI-DSS, ISO/IEC 27001.
• Experience leading technical teams in implementing compliance controls.
• Familiarity with SDLC tools such as Git, Jenkins, Azure DevOps, and code security scanning.

Responsibilities

• Full ownership and coordination of internal, external, and regulatory IT audits across the Tech Division including yearly PCI-DSS validation.
• Track and ensure closure of all audit observations with strong documentation and root cause analysis.
• Maintain a comprehensive register of all audit activities and ensure year-round readiness.
• Ensure timely completion of all audit-related deliverables, including DR, BCP, and ad hoc assessments.
• Drive and execute the company-wide Cybersecurity Awareness Program with awareness content and phishing simulations.
• Collaborate with DevOps teams to ensure secure and compliant deployment practices.
• Lead initiatives to automate and restructure processes with a focus on compliance, visibility, and efficiency.

Skills

IT Governance

Audit & Compliance

Regulatory Knowledge

Risk Management

SDLC & DevSecOps

Education

Bachelor’s degree in IT or Cybersecurity

Tools

Git

Jenkins

Azure DevOps

Code security scanning

Job description

TNG Digital Sdn Bhd in Kuala Lumpur seeks a Team Lead for IT Governance to own and coordinate internal, external, and regulatory audits across the Tech Division, including PCI-DSS validation. You will track audit observations and ensure comprehensive documentation, maintaining readiness throughout the year.

The role requires 7+ years in IT governance, strong knowledge of BNM RMiT, PCI-DSS, and ISO/IEC 27001, and experience guiding DevSecOps and secure SDLC practices.